It is not expensive, unfortunately :(

Flare + BleepingComputer 2026, Kaspersky, StormWall, and others show that the DDoS-as-a-service market is highly commoditized and prices are extremely low:

A short test / basic attack on a website: $5–25.

Daily attack on a poorly protected target: around $100/day.

A more robust or well-protected target: $200–500 per day.

Monthly subscription to booter/stresser services: often $15–40 (sometimes even less); premium packages cost hundreds of dollars.

Larger or longer-term campaigns or infrastructure: thousands of dollars.

On the governmental level these money are almost nothing if you want to hurt someone else…

DDoS tends to be monetised as DDoS-as-a-service. Taking down "significant" services is good advertising. Either that, or they plan to extort the Norwegian government.

Probably a country that lost to Norway in the World Cup.

is there actually any source those attacks are really done by "script kiddies"?

More likely this more politically motivated and backed up by money and more capable groups

What do they benefit from taking down any government, NGO or civic work program? American systems, as well as larger European systems are constantly attacked. I've seen the same traffic. Fire walling off China, North Korea and smaller eastern European countries is a must if you ever plan to expose any internet exposed services.

> So which actor would actually benefit from downing the Norwegian government?

do we really need to ask?

clearly it's the Danes

Imo russia most likely

It hasn't been majorly like that in twenty years.

Botnets are services now, a business. They gain customers by their effectiveness and resilience.

For $$50-100 you can deny service to a lot of big sites and services.

Really, you have no one in mind? Someone who is sending hundreds of bombing drones daily to Ukraine, killing civilian population, women and children, and who is eager to send a message to NATO countries any way possible?

those script kiddies control botnets in foreign countries and use them to attack stuff just bc. its not their compute, so no marginal cost to them

[dead]

The UK. It wants to steal Norway's vast stores of electricity.

Or someone entered 2.144.0.0/14 but on a machine without ECC and a bit-flip happened, turning it into 2.148.0.0/14.

Yes, it's a single point of failure by design - but has been pretty stable mostly - with this and a previous attack in June being exceptions.

The identity portal is administered by the department for digital services, but hosted at a commercial provider, Vivicta (formerly TietoEvery, formerly Tieto and Every - Consulting companies from Finland and Norway).

https://www.agilitaspe.com/index.php?id=136

Is it run/developed by Tieto (Vivicta)?

Ed: I'm guessing yes?

https://vayla.fi/-/new-public-transportation-travel-card-sys...

I certainly hope the Norwegian government doesn't force all of its citizens to transmit all of their private data to the US government.

From TFA:

> Det har siden kl. 01 mandag 3. august pågått et tjenestenektangrep (DDoS) som rammer ID-porten som driftes hos Digdirs driftspartner Vivicta.

> Since 0100 hours Monday August 31st there's been an ongoing DDoS attack which affects the ID-Portal which is run/hosted by DepDig's (Department of digital services') service provider Vivicta.

(My translation)

Ed: just realized Vivicta is TietoEvery with a haircut and new shoes:

https://www.agilitaspe.com/index.php?id=136

"The internet" is currently fine, besides Norwegian government services.

Also something designed to withstand something does not imply it survives other somethings.

Guess a nuclear attack would actually lessen the load on the global internet, rather than increase it - like a DDOS would!

[dead]

Could be, but it does not look like any of the ways they done before. Anyone who benefits from instability would be at win, from internal political competition, foreign companies trying to sell flocked up systems and the list could be huge.

Not saying it was not who you think it was, Im just saying it does not have enough information yet to be the only explanation or at least the most obvious one.

could just be openai.

[flagged]